Note: This is an archival copy of Security Sun Alert 201478 as previously published on http://sunsolve.sun.com.|
Latest version of this security advisory is available from http://support.oracle.com as Sun Alert 1001105.1.
Solaris 9 Operating System
Solaris 2.6 Operating System
Solaris 7 Operating System
Solaris 8 Operating System
Date of Resolved Release
A kernel race condition may cause a Solaris system working as a print server to panic during high loads. This race condition may also be triggered by an unprivileged local user executing exploit code which utilizes pipe(2) and certain STREAMS routines.
Note: This condition does not allow a local user to gain root or uid(0) access to the system.
This issue can occur in the following releases:
This issue is most likely to occur on, but is not limited to, systems having more than one CPU. Some of the print service programs can also trigger this issue if print services are used extensively on the system.
To verify if the described issue has been experienced, check the stack trace in the crash dump which is typically located in the "/var/crash/<hostname>" directory. There is a high probability that the system has encountered this issue if the stack trace is similar to the following:
#ls unix.0 vmcore.0 #/usr/bin/adb -k unix.0 vmcore.0 physmem 7a7c1 $c fifo_vfastoff+4 stubs_common_code+0x70 msgio32+0x8c putmsg32+0x9c syscall_trap32+0xa8 $q #
There is no workaround. Please see the "Resolution" section below.
This issue is addressed in the following releases:
This solution has no attachment